Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: BYbTcpkc/OQKWCY45H8T6wdFNOLYfbQtRjFNvgg/hQ8=
Subject key identifier: 03:6B:F3:23:99:90:C3:3B:A8:0E:10:E1:AC:62:81:E5:EB:A7:4C:A8
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 01976DAB25378F0B3A5A14B4D76372B95EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0C74
Signing time: Sat 14 Jun 2025 09:00:21 +0000
Manifest this update: Sat 14 Jun 2025 09:00:21 +0000
Manifest next update: Sun 15 Jun 2025 09:00:21 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: Wg9/KlSJ8Nmg9dQhEwmjf5IXjuVRb0RSjbAfXervwe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:25:37:8f:0b:3a:5a:14:b4:d7:63:72:b9:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jun 14 09:00:21 2025 GMT
Not After : Jun 15 09:00:21 2025 GMT
Subject: CN=036bf3239990c33ba80e10e1ac6281e5eba74ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:97:32:29:4a:76:32:37:89:71:7e:da:1d:
9a:26:39:70:c3:25:ae:96:02:6a:c8:04:39:a8:15:
63:9c:7c:80:63:f8:f8:06:e9:16:ae:c5:b5:8c:d5:
3a:0e:b0:5d:9c:ee:c4:bd:5a:be:32:27:7b:79:d9:
76:4d:00:9f:42:65:bc:c4:5f:b7:b5:d7:50:dc:f5:
45:98:d3:38:8f:37:22:08:aa:41:88:07:b9:7a:25:
78:8b:cf:7d:c6:a1:3a:3b:2c:9c:5f:2f:ab:a6:66:
bd:db:94:c6:f2:4a:00:9f:29:e2:48:bc:e3:c1:16:
df:2a:c8:15:2d:53:9a:21:70:eb:9b:cc:8c:25:95:
be:25:b7:6e:89:f2:e2:a8:db:12:c3:54:d8:b1:a5:
f1:49:86:fa:6d:29:09:38:a8:16:69:7c:db:5b:89:
25:2f:13:9e:a1:1f:c9:82:61:c2:8b:f5:4e:b9:13:
6b:4a:78:27:ba:4f:d4:37:b4:21:3b:3b:d0:9e:88:
92:1b:a9:61:0c:f4:23:c1:45:82:b0:ec:18:3c:29:
15:5c:d1:a9:e7:66:5e:7b:a0:c0:3b:b3:b5:7d:c2:
31:0b:45:65:34:4c:c1:2c:ab:fb:ee:d6:77:f5:11:
2c:b2:70:12:fe:47:9a:34:5a:72:8f:24:c4:6e:21:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:F3:23:99:90:C3:3B:A8:0E:10:E1:AC:62:81:E5:EB:A7:4C:A8
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8f:ca:f7:8b:0d:8b:34:f0:be:b3:f4:62:7e:88:fb:b7:e4:
15:05:de:dd:ad:dc:7c:20:39:61:e7:22:3a:d5:77:1d:b9:0d:
61:ff:c5:cc:af:b7:22:a9:a2:3c:80:07:93:01:33:89:e2:69:
54:54:f2:6b:1e:d4:81:43:4d:f2:89:3e:34:01:b5:66:6a:f8:
0a:cb:a7:ca:0f:c8:99:58:b4:1b:ed:3a:bc:55:ae:68:b8:66:
a0:a6:f5:8c:5d:e8:10:1b:1d:c4:9c:a6:3c:81:75:a1:e1:00:
98:5b:5e:16:c3:36:54:1d:3c:8d:8c:81:d9:94:fd:db:6e:39:
3b:98:37:ea:64:59:52:67:74:19:1f:6d:5b:e1:d0:91:f9:1c:
f8:03:20:bd:7b:ee:5c:d2:6c:db:b3:99:ab:f4:2f:8a:f5:e9:
aa:88:01:1d:65:5e:40:e0:26:d4:63:68:10:cd:6a:e9:50:6c:
31:ca:77:e8:6c:0d:be:be:4f:c5:31:c0:d1:39:1d:00:43:eb:
00:c6:52:6b:33:93:42:4d:66:21:8f:d7:2b:30:58:44:49:f4:
41:41:45:31:1d:9e:7b:6e:c1:90:a8:93:e4:39:26:98:84:c7:
be:50:6d:84:bb:7e:20:2e:cf:43:45:8e:7b:d1:da:f0:2b:fe:
93:fb:1c:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdtqyU3jws6WhS012NyuV7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTc2YzY5MmUyZjM2MTlkZTc5ODIwNTQ4ZWNiNWZhN2Mz
MGExODEwHhcNMjUwNjE0MDkwMDIxWhcNMjUwNjE1MDkwMDIxWjAzMTEwLwYDVQQD
EygwMzZiZjMyMzk5OTBjMzNiYTgwZTEwZTFhYzYyODFlNWViYTc0Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJCXMilKdjI3iXF+2h2aJjlwwyWu
lgJqyAQ5qBVjnHyAY/j4BukWrsW1jNU6DrBdnO7EvVq+Mid7edl2TQCfQmW8xF+3
tddQ3PVFmNM4jzciCKpBiAe5eiV4i899xqE6OyycXy+rpma925TG8koAnyniSLzj
wRbfKsgVLVOaIXDrm8yMJZW+JbduifLiqNsSw1TYsaXxSYb6bSkJOKgWaXzbW4kl
LxOeoR/JgmHCi/VOuRNrSngnuk/UN7QhOzvQnoiSG6lhDPQjwUWCsOwYPCkVXNGp
52Zee6DAO7O1fcIxC0VlNEzBLKv77tZ39REssnAS/keaNFpyjyTEbiEbUwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFANr8yOZkMM7qA4Q4axigeXrp0yoMB8GA1UdIwQY
MBaAFPinbGkuLzYZ3nmCBUjstfp8MKGBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LZHNhUzR2TmhuZWVZSUZTT3kxLW53d29ZRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvY2YwZWQ2LTVkOGQtNDdmZi1iZDg2
LWE1ZGU4NmVkZjgzZS8xLzEtS2RzYVM0dk5obmVlWUlGU095MS1ud3dvWUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzExL2NmMGVkNi01ZDhkLTQ3ZmYtYmQ4Ni1hNWRlODZlZGY4
M2UvMS8xLUtkc2FTNHZOaG5lZVlJRlNPeTEtbnd3b1lFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo/K
94sNizTwvrP0Yn6I+7fkFQXe3a3cfCA5YeciOtV3HbkNYf/FzK+3IqmiPIAHkwEz
ieJpVFTyax7UgUNN8ok+NAG1Zmr4Csunyg/ImVi0G+06vFWuaLhmoKb1jF3oEBsd
xJymPIF1oeEAmFteFsM2VB08jYyB2ZT92245O5g36mRZUmd0GR9tW+HQkfkc+AMg
vXvuXNJs27OZq/QvivXpqogBHWVeQOAm1GNoEM1q6VBsMcp36GwNvr5PxTHA0Tkd
AEPrAMZSazOTQk1mIY/XKzBYREn0QUFFMR2ee27BkKiT5DkmmITHvlBthLt+IC7P
Q0WOe9Ha8Cv+k/scQw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:43 2025 by rpki-client